[IT-SecNots] CiviCRM Security Release (4.6.16, 4.7.7) - CIVI-SA-2016-07, CIVI-SA-2016-08

["CiviCRM" <info AT civicrm.org>]

There has been a security advisory for CiviCRM. We recommend you immediately upgrade to one of the following versions:

• CiviCRM v4.6.16
• CiviCRM v4.7.7

The security advisories resolved in these releases address issues with SQL injections and XSS in the CiviCRM backend.

Read the security advisories for details:

• https://civicrm.org/advisory/civi-sa-2016-07-sql-injections-in-ajax-callbacks
• https://civicrm.org/advisory/civi-sa-2016-08-persistent-xss-in-civicrm-backend

A number of other issues have been fixed in these releases. Upgrade now for the most stable CiviCRM experience (https://civicrm.org/download).

CiviCRM security announcements are available from https://civicrm.org/advisory and via the CiviCRM Security Notifications email list.

 

---

 

Click this link to unsubscribe from this mailing list.

Click this link to opt out of all mail from CiviCRM.org.

Our mailing address is:

San Francisco, CA 94117
United States